Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8CF1E17EB6D9A7080DB6B0F50A25A46AC21B045D3C1C39BE022D213BF41CD7B1/0/323830363a3238633a633030303a3a2f33342d3334203d3e20323635353239.roa
File:                     323830363a3238633a633030303a3a2f33342d3334203d3e20323635353239.roa (raw, json)
Hash identifier:          Z4X0Cv0qB5PDn7c/7HtAcs50LZQ/QaQ4ZJwyvK3+Ccc=
Subject key identifier:   8F:E7:3C:D8:0B:F3:2F:90:DD:B6:AD:AF:6A:69:C8:3A:ED:6E:2D:0B
Certificate issuer:       /CN=42FB55A41791F87502D72CC216E456680D5D80C0
Certificate serial:       13B59E0C05CC2210651BEAF487745E90FE33B33D
Authority key identifier: 42:FB:55:A4:17:91:F8:75:02:D7:2C:C2:16:E4:56:68:0D:5D:80:C0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/42FB55A41791F87502D72CC216E456680D5D80C0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8CF1E17EB6D9A7080DB6B0F50A25A46AC21B045D3C1C39BE022D213BF41CD7B1/0/323830363a3238633a633030303a3a2f33342d3334203d3e20323635353239.roa
Signing time:             Tue 02 Jun 2026 14:45:03 +0000
ROA not before:           Tue 02 Jun 2026 14:40:03 +0000
ROA not after:            Tue 01 Jun 2027 14:45:03 +0000
asID:                     265529
IP address blocks:        2806:28c:c000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8CF1E17EB6D9A7080DB6B0F50A25A46AC21B045D3C1C39BE022D213BF41CD7B1/0/42FB55A41791F87502D72CC216E456680D5D80C0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8CF1E17EB6D9A7080DB6B0F50A25A46AC21B045D3C1C39BE022D213BF41CD7B1/0/42FB55A41791F87502D72CC216E456680D5D80C0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/42FB55A41791F87502D72CC216E456680D5D80C0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Jun 2026 16:50:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:b5:9e:0c:05:cc:22:10:65:1b:ea:f4:87:74:5e:90:fe:33:b3:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42FB55A41791F87502D72CC216E456680D5D80C0
        Validity
            Not Before: Jun  2 14:40:03 2026 GMT
            Not After : Jun  1 14:45:03 2027 GMT
        Subject: CN=8FE73CD80BF32F90DDB6ADAF6A69C83AED6E2D0B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:8f:67:d8:bc:7b:19:da:1a:ae:7c:b9:63:c5:
                    09:4f:3c:38:6c:0a:8d:09:af:53:42:32:b8:28:03:
                    0d:77:eb:d2:1f:d9:c3:58:4d:92:10:9c:77:4f:2e:
                    ad:0a:bc:1f:b2:b9:74:e0:40:98:cd:03:92:56:3c:
                    af:59:9e:cf:c2:80:58:10:cb:b7:11:5a:b4:ff:6f:
                    9b:fc:c2:f8:9d:33:20:7c:fc:b0:72:61:c8:2e:75:
                    fb:9d:13:be:1d:25:b6:20:3c:fd:3c:72:df:53:9c:
                    c3:7b:a2:cb:b3:06:7c:b2:5e:eb:18:dd:42:86:04:
                    ed:40:15:54:3f:95:b2:5f:85:b4:88:d1:02:4c:89:
                    21:41:91:84:d7:24:bd:68:0e:b1:cf:63:5e:21:de:
                    b4:31:29:51:07:03:27:a1:a3:d6:00:73:b1:89:f5:
                    ae:b9:5f:22:b5:9f:93:52:8e:1a:6b:e3:ec:55:4f:
                    fe:e6:25:e7:39:99:2e:44:05:1c:a5:88:10:ed:3a:
                    46:a6:d8:76:62:24:5a:76:67:00:cb:d5:27:aa:0f:
                    66:9e:b7:90:0a:5a:8a:dd:fd:3a:7b:2a:27:f2:e2:
                    bd:57:60:70:7e:58:10:19:2c:dc:ca:fb:13:2b:6d:
                    4b:a5:58:07:70:57:13:41:f7:b9:72:c3:32:3b:24:
                    fa:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:E7:3C:D8:0B:F3:2F:90:DD:B6:AD:AF:6A:69:C8:3A:ED:6E:2D:0B
            X509v3 Authority Key Identifier:
                keyid:42:FB:55:A4:17:91:F8:75:02:D7:2C:C2:16:E4:56:68:0D:5D:80:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8CF1E17EB6D9A7080DB6B0F50A25A46AC21B045D3C1C39BE022D213BF41CD7B1/0/42FB55A41791F87502D72CC216E456680D5D80C0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/42FB55A41791F87502D72CC216E456680D5D80C0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8CF1E17EB6D9A7080DB6B0F50A25A46AC21B045D3C1C39BE022D213BF41CD7B1/0/323830363a3238633a633030303a3a2f33342d3334203d3e20323635353239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:28c:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         5a:24:23:60:c7:a9:17:a8:39:d5:34:b8:31:93:94:6f:42:95:
         ac:fe:6e:d9:74:30:fa:41:e4:0a:c2:0a:1b:eb:b0:b8:e1:17:
         ad:2d:5d:12:75:a7:dd:2a:f4:9f:8e:7e:40:01:99:51:a7:4f:
         a5:4e:1f:ad:88:87:2a:ac:01:4d:0d:7b:15:c2:98:2a:21:c5:
         2f:80:dd:73:d9:69:b3:6c:be:06:17:92:62:3b:67:99:19:6b:
         36:32:fe:23:9d:d6:e1:29:b7:9e:9f:bd:0c:1f:37:2a:a2:ce:
         6f:7c:73:49:8e:a2:31:f1:3a:3f:6f:09:1d:6a:e3:e6:fe:15:
         38:2e:71:b1:cc:8f:ce:ec:c1:56:a2:f0:0f:2e:78:d0:dd:e1:
         bc:d4:94:4e:07:42:bb:1c:20:06:2b:9b:7d:28:c3:65:38:1c:
         25:85:47:09:65:fc:5f:26:81:e8:88:9e:1a:56:db:96:ff:6c:
         a9:4a:4d:4a:23:bd:5d:9b:50:68:dd:0e:05:dd:f5:e2:db:ea:
         61:eb:69:4f:70:41:54:d3:33:9f:70:87:d6:a2:e0:e4:00:31:
         16:ec:df:91:3e:29:06:c5:31:dd:a5:2e:be:b5:af:0e:73:14:
         ed:a6:22:f9:52:bf:e7:6b:95:ce:4d:94:cd:9e:b6:46:c4:c2:
         42:39:6f:e8
-----BEGIN CERTIFICATE-----
MIIFyDCCBLCgAwIBAgIUE7WeDAXMIhBlG+r0h3RekP4zsz0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDJGQjU1QTQxNzkxRjg3NTAyRDcyQ0MyMTZFNDU2Njgw
RDVEODBDMDAeFw0yNjA2MDIxNDQwMDNaFw0yNzA2MDExNDQ1MDNaMDMxMTAvBgNV
BAMTKDhGRTczQ0Q4MEJGMzJGOTBEREI2QURBRjZBNjlDODNBRUQ2RTJEMEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9j2fYvHsZ2hqufLljxQlPPDhs
Co0Jr1NCMrgoAw1369If2cNYTZIQnHdPLq0KvB+yuXTgQJjNA5JWPK9Zns/CgFgQ
y7cRWrT/b5v8wvidMyB8/LByYcgudfudE74dJbYgPP08ct9TnMN7osuzBnyyXusY
3UKGBO1AFVQ/lbJfhbSI0QJMiSFBkYTXJL1oDrHPY14h3rQxKVEHAyeho9YAc7GJ
9a65XyK1n5NSjhpr4+xVT/7mJec5mS5EBRyliBDtOkam2HZiJFp2ZwDL1SeqD2ae
t5AKWord/Tp7Kify4r1XYHB+WBAZLNzK+xMrbUulWAdwVxNB97lywzI7JPphAgMB
AAGjggLSMIICzjAdBgNVHQ4EFgQUj+c82AvzL5Ddtq2vamnIOu1uLQswHwYDVR0j
BBgwFoAUQvtVpBeR+HUC1yzCFuRWaA1dgMAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy84Q0YxRTE3RUI2RDlBNzA4MERCNkIwRjUwQTI1QTQ2QUMy
MUIwNDVEM0MxQzM5QkUwMjJEMjEzQkY0MUNEN0IxLzAvNDJGQjU1QTQxNzkxRjg3
NTAyRDcyQ0MyMTZFNDU2NjgwRDVEODBDMC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80MkZCNTVBNDE3OTFGODc1MDJE
NzJDQzIxNkU0NTY2ODBENUQ4MEMwLmNlcjCBzwYIKwYBBQUHAQsEgcIwgb8wgbwG
CCsGAQUFBzALhoGvcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOENGMUUxN0VCNkQ5QTcwODBEQjZCMEY1MEEyNUE0NkFDMjFCMDQ1RDND
MUMzOUJFMDIyRDIxM0JGNDFDRDdCMS8wLzMyMzgzMDM2M2EzMjM4NjMzYTYzMzAz
MDMwM2EzYTJmMzMzNDJkMzMzNDIwM2QzZTIwMzIzNjM1MzUzMjM5LnJvYTAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAI
AwYGKAYCjMAwDQYJKoZIhvcNAQELBQADggEBAFokI2DHqReoOdU0uDGTlG9Claz+
btl0MPpB5ArCChvrsLjhF60tXRJ1p90q9J+OfkABmVGnT6VOH62IhyqsAU0NexXC
mCohxS+A3XPZabNsvgYXkmI7Z5kZazYy/iOd1uEpt56fvQwfNyqizm98c0mOojHx
Oj9vCR1q4+b+FTgucbHMj87swVai8A8ueNDd4bzUlE4HQrscIAYrm30ow2U4HCWF
Rwll/F8mgeiInhpW25b/bKlKTUojvV2bUGjdDgXd9eLb6mHraU9wQVTTM59wh9ai
4OQAMRbs35E+KQbFMd2lLr61rw5zFO2mIvlSv+drlc5NlM2etkbEwkI5b+g=
-----END CERTIFICATE-----
Generated at Sun Jun 14 09:59:18 2026 by rpki-client